Quoting Philipp Grosswiler <[EMAIL PROTECTED]>:

> OK, clamd already crashed once again, and now I was trying to follow
> your
> guide...
> 
> > (I'm going to assume you're clamd is multithreaded. If not 
> > just do steps 1-3 followed by the command 'bt').
> 
> I think so, how can I tell?

clamd will be linked against libpthread, the command 'ldd /usr/local/sbin/clamd'
should so this.

> 
> > This may, or may not, provide some useful information.
> > 
> > 1. Use 'ps' to get the PID of clamd:
> >       ps -aux (or ps -elf on SysV)
> 
> I found three PIDs matching "clamd".
> 
> > clamav   24897  0.0  1.9 38032 10068 ?       S    Jan13   
> > 0:00 lt-clamd
> >           ^---- pid
> > 
> > 2. Attach gdb to the running process
> >       gdb /usr/local/bin/clamd 24897
> >             ^--- path to         ^--- process id, from above 
> >             clamd binary
> 
> clamd resides in /usr/local/sbin/clamd, when I am starting up gdb with
> this
> path and the PID, it says "Attaching to..." and freezes...
> 
> > 3. you should now get the gdb prompt, as:  (gdb)
> 
> Unfortunately, this never happens. I tried all the three different
> PIDs...
> 

What platform are you using?

One problem I do get with clamd is this:

$ clamdscan .
Session(1): Time out ERROR
 
----------- SCAN SUMMARY -----------
Infected files: 0
Time: 3.645 sec (0 m 3 s)
[EMAIL PROTECTED] gale]$ clamdscan .
/home/gale/./.mozilla/default/5bc4ycs6.slt/Cache/_CACHE_002_:
Eicar-Test-Signature FOUND
Session(0): Time out ERROR

Timed out after 3 seconds! Thats not right.

A quick look at the code, and it seems that the thread timeout code isn't correct.

It is also possible that there is a mutex locking bug in clamd.

Cheers,
-trog


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to